KYC for Microfinance Institutions (MFIs): RBI Guidelines and Process

KYC for microfinance does not look like KYC for a retail bank. The borrower is typically a low-income household member with fewer formal documents. The onboarding often happens in a village through a field agent with a tablet, and the loan structure (joint liability groups and self-help groups) means multiple people get onboarded together. The […]

KYC for microfinance does not look like KYC for a retail bank. The borrower is typically a low-income household member with fewer formal documents. The onboarding often happens in a village through a field agent with a tablet, and the loan structure (joint liability groups and self-help groups) means multiple people get onboarded together.

The regulatory stack combines the standard NBFC KYC framework with RBI’s 2022 microfinance-specific direction that introduced household-income assessment and the ₹3,00,000 household income threshold.

This guide explains how KYC for microfinance actually works in 2026: which institutions are covered, what the regulatory stack requires, how group-based JLG and SHG onboarding happens, which digital KYC methods are feasible in low-connectivity environments, and what operational challenges MFIs solve for that standard NBFC KYC content does not address. For the broader NBFC onboarding foundation that MFI KYC sits on top of, our NBFC onboarding guide covers the core framework.

Who Counts as an MFI Under RBI Rules

The “MFI” label covers several institution types, and the applicable rules vary slightly across them.

NBFC-MFI Classification

An NBFC-MFI is a Non-Banking Financial Company that qualifies as a Microfinance Institution based on the composition of its loan portfolio. Under RBI’s current framework, an NBFC qualifies as an NBFC-MFI when at least 75% of its total assets are deployed in microfinance loans as defined by the Reserve Bank. The definition of a microfinance loan itself is specific: a collateral-free loan to a household with annual household income up to ₹3,00,000, regardless of end use or mode of application.

Non-NBFC MFIs

Section 8 microfinance companies, cooperative lenders, and other non-NBFC entities that operate in the microfinance space are not subject to RBI’s NBFC-MFI framework but remain subject to PMLA obligations and, for registered entities, sector-specific oversight. KYC obligations apply whenever the entity qualifies as a reporting entity under PMLA, regardless of whether it sits formally under RBI’s NBFC-MFI category.

SFBs and Banks With Microfinance Portfolios

Small Finance Banks (SFBs) and commercial banks that lend into the microfinance segment follow the bank KYC framework for the customer identification side but apply the microfinance-specific operational overlays (household income assessment, group lending mechanics) that the sector requires. The 2022 RBI Microfinance Master Direction applies to these banks too, with minor adjustments for the bank-specific context.

The Regulatory Stack for MFI KYC

Three regulatory layers govern MFI KYC in India, and each one plays a specific role.

The RBI NBFC KYC Master Direction, 2025

The NBFC-specific KYC Master Direction issued on November 28, 2025 is the primary KYC framework for NBFC-MFIs. It covers Customer Identification Procedure, Customer Due Diligence, periodic updation, and CKYCR obligations. MFI-specific provisions sit on top of this base framework rather than replacing it.

RBI Master Direction on Microfinance Loans, 2022

The Reserve Bank of India (Regulatory Framework for Microfinance Loans) Directions, 2022 is the sector-specific layer. It introduced the ₹3,00,000 household income threshold for microfinance loans, the 50% cap on loan repayment obligation to household income, and the board-approved policy requirement for household income assessment. These are not KYC rules per se but they shape the onboarding process because they require income data that must be captured alongside identity.

PMLA and MFIN Industry Standards

PMLA obligations (STR and CTR reporting, record retention, customer identification) apply to NBFC-MFIs as to any other reporting entity. The Microfinance Industry Network (MFIN) publishes a compendium of directives and advisories that functions as the practical industry standard for member MFIs. The compendium codifies operational practices around Credit Bureau reporting, Fair Practices Code, and onboarding that complement the formal RBI framework.

Core KYC Obligations for MFIs

Four obligations sit at the core of MFI KYC, and each has operational nuances that standard NBFC KYC content glosses over.

Customer Identification at Onboarding

MFI borrowers must be identified using an Officially Valid Document just like any other NBFC customer. The practical difference is that the OVD list for MFI borrowers leans on identity documents that low-income rural households are more likely to have: Aadhaar, voter ID, and the NREGA job card. Aadhaar is not mandatory under the RBI framework, but it is the most operationally efficient because it enables biometric eKYC, which we cover further down.

Household Income Assessment and Documentation

This is the MFI-specific layer that distinguishes microfinance KYC from standard NBFC KYC. Every RE must have a board-approved policy for assessing household income, which RBI clarifies must cover the income of the entire household (husband, wife, and unmarried children), not just the individual borrower. The assessment typically combines self-declaration, local inquiry, and supporting documentation where available. The result feeds into both the loan eligibility decision (is the household under the ₹3,00,000 threshold) and the 50% repayment-to-income cap.

Risk Categorisation and Periodic Updation

Most MFI borrowers fall into the low-risk category under standard RBI risk rating, which means periodic updation follows the 10-year cadence with the June 30, 2026 extension for pending updates. Higher-risk borrowers (unusual transaction patterns, beneficial ownership ambiguity) follow the standard 2/8/10 framework as any other NBFC customer. Our re-KYC guide covers the cadence in detail.

CKYC Upload Obligations

NBFC-MFIs must query the CKYC Registry before running fresh KYC and upload completed KYC records to CKYCR within 10 working days. For MFIs operating at scale, this is an engineering task that needs automation; manual CKYC upload does not keep pace with the volume of borrowers onboarded per week.

Group-Based KYC: JLG and SHG Models

Joint Liability Groups and Self-Help Groups are the two dominant borrower structures in Indian microfinance, and they each require specific KYC approaches that do not appear in standard NBFC KYC frameworks.

Joint Liability Groups (JLGs)

A JLG is a group of typically four to ten borrowers who apply for loans together and guarantee each other’s repayment. Each JLG member undergoes individual KYC, which means the MFI runs full CIP on every member regardless of the group structure. The group guarantee documentation is separate from the KYC file: the MFI captures individual identity and income, then separately captures the group formation, guarantee declarations, and meeting records. Conflating these two is a common programme error that shows up at audit.

Self-Help Groups (SHGs)

SHGs are larger borrower groups, typically 10 to 20 members, often federated through a local NGO or federation. KYC for SHG members was simplified under RBI’s 2017 norms, which allow a lighter KYC path where the SHG itself is the bank’s customer and individual members are identified through the group. This does not remove individual identification but it changes the operational shape: the bank’s primary file is the SHG, with member KYC attached as sub-documents. The bank-linkage model (where banks lend to SHGs which lend to members) is the dominant SHG pattern in India.

Field Agent-Led KYC Workflows

Most MFI KYC happens through a field agent who visits the borrower’s village or home with a tablet and runs the onboarding in person. The field agent captures the identity document (Aadhaar in most cases), performs biometric authentication, takes a photograph with geo-tag and timestamp, and records the household income assessment. Liability for the KYC quality remains with the MFI, not the agent, which means the agent workflow must include supervisory checks, geo-fencing of capture locations, and periodic audit of agent-level approval rates.

Digital KYC Methods Available to MFIs

MFIs use three digital KYC paths, each suited to a specific operational context.

Aadhaar-Based eKYC (OTP and Biometric)

Aadhaar biometric eKYC is the dominant method in MFI onboarding. The borrower places a finger on a biometric reader connected to the agent’s tablet, the reader queries UIDAI, and the response confirms identity within seconds. This is materially better than OTP-based Aadhaar eKYC for low-literacy borrowers who may not reliably receive or read OTPs. Our biometric identity verification explainer covers how this works under the hood. Document OCR on the Aadhaar card itself, via something like an Aadhaar card verification OCR service, handles the cases where biometric authentication is not feasible.

Digital KYC (D-KYC) in Low-Connectivity Environments

D-KYC (live photo plus geo-tag plus officer certification) is the backup path when Aadhaar biometric eKYC cannot be used, which happens in areas with poor connectivity or when the borrower’s Aadhaar biometrics are not matching at UIDAI. The D-KYC path records a live photo of the borrower holding the original document, captures GPS coordinates and timestamp, and requires the field agent to certify the authenticity. The captured data syncs to the back-end system when connectivity is restored, which is the common pattern in rural deployments.

Video KYC (V-CIP) Feasibility

V-CIP is allowed for MFI onboarding but rarely used in practice. Rural connectivity is often not sufficient for real-time video, the borrower’s device may not be capable, and the operational pattern of field-agent-led onboarding does not naturally fit V-CIP’s real-time officer requirement. Our RBI video KYC guidelines cover the parameters; for MFIs, V-CIP usually serves only the digitally-onboarded borrower segment in urban or semi-urban contexts.

Operational Challenges in MFI KYC

Three operational problems recur across MFI KYC programmes, and each requires deliberate design to solve.

Low Literacy and Documentation Gaps

Many MFI borrowers have limited literacy and do not hold the standard documents an urban borrower would. The OVD list designed for rural low-income borrowers accepts NREGA job cards, voter IDs, and in some cases letters from local authorities. Thumbprints are captured with witness signatures where the borrower cannot sign. The KYC programme must accommodate these variations without forcing the field agent to escalate every non-standard case.

Connectivity and Device Limitations

Rural connectivity is intermittent. Biometric readers fail. Tablet batteries die. The KYC technology stack has to work offline and sync on reconnect, handle partial captures, and recover from device-side failures without losing the onboarding journey. Programmes that treat connectivity as a given end up with high drop-off rates in the field.

Agent Fraud and Authenticity Checks

Field agents handling cash and KYC records in remote locations are a known fraud risk. The programme must include geo-fencing of capture locations (was the capture actually done in the village the agent claimed), photo timestamps that cannot be spoofed, device fingerprinting, and periodic audit of agent-level approval and rejection rates to surface outliers. Without these controls, an agent-led KYC operation is structurally vulnerable to manipulation.

MFI KYC Audit and Governance

MFI KYC audit intensity is shaped by two factors: RBI’s scale-based regulation for NBFC-MFIs and the SRO-level supervision from MFIN and Sa-Dhan.

Internal Audit Expectations for MFI KYC

Internal audit for an NBFC-MFI samples customer files across branches and agents, not just across time periods. The goal is to catch branch-level or agent-level variance that a time-based sample would miss. KYC audit covers the standard NBFC controls (policy, onboarding quality, periodic updation, CKYC sync) plus MFI-specific controls (household income assessment quality, JLG and SHG documentation, field agent workflow integrity).

Self-Regulatory Organisation Role

MFIN is the principal SRO for the microfinance sector in India, with Sa-Dhan operating alongside. Member MFIs follow the MFIN compendium of directives, participate in industry-level credit bureau reporting via the Uniform Credit Reporting Format, and submit to peer benchmarking. SRO supervision complements RBI oversight and, in practice, tightens the operational expectations for KYC quality beyond the formal regulatory floor.

Getting MFI KYC Right

An MFI KYC programme that works in production looks different from a standard NBFC KYC programme in three ways. It is designed for offline-first capture and sync. It treats the household income assessment as a first-class step, not an afterthought bolted onto KYC. And it builds audit controls into the field agent workflow rather than relying on back-office reconciliation.

To see how HyperVerge helps NBFC-MFIs onboard borrowers in field conditions with biometric Aadhaar eKYC, offline D-KYC, geo-fenced agent workflows, and automated CKYCR upload, sign up for a product walkthrough.

Frequently Asked Questions

MFI borrowers are identified using an Officially Valid Document (Aadhaar, voter ID, NREGA job card, or other accepted OVDs) and a household income assessment that feeds into the loan eligibility decision. Most onboarding happens through a field agent who visits the borrower in person, captures identity via Aadhaar biometric eKYC or D-KYC, and records the household income using the MFI's board-approved methodology. The completed KYC record is uploaded to the CKYC Registry within 10 working days and to the relevant credit bureaus.

No. Aadhaar is not mandatory under the RBI KYC framework for MFI borrowers, same as for other NBFC customers. However, Aadhaar is the most operationally efficient OVD in MFI onboarding because it enables biometric eKYC, which works well for low-literacy borrowers. Alternative OVDs including voter ID, passport, driving licence, and NREGA job cards are accepted where Aadhaar is not used or cannot be authenticated.

Periodic updation follows the standard risk-based cadence: every two years for high-risk customers, every eight years for medium-risk, and every ten years for low-risk. Most MFI borrowers fall into the low-risk bucket, which puts them on the 10-year cadence. For low-risk customers whose update has fallen due, the deadline has been extended to June 30, 2026. Event-triggered re-KYC (address change, risk rating change, sanctions hit) applies to MFI borrowers as to any other customer segment.

Aadhaar, voter ID, passport, driving licence, and the NREGA job card are the most commonly used OVDs in MFI onboarding. Aadhaar is the operational default because of biometric eKYC efficiency. Proof of household income accompanies the KYC file and is collected via a combination of self-declaration, local inquiry, and supporting documentation where available. Witness signatures or thumbprints are used where the borrower cannot sign, per standard RBI guidance on documentation for low-literacy borrowers.

Yes, V-CIP is permitted for MFI onboarding under the RBI KYC Master Direction framework. In practice, V-CIP is rarely used for rural borrowers because of connectivity limitations and the field-agent-led onboarding pattern. V-CIP is more common in urban or semi-urban MFI segments where the borrower has smartphone access and reliable internet. Aadhaar biometric eKYC and D-KYC are the dominant methods in rural MFI onboarding.

Bank KYC for microfinance borrowers follows the bank KYC framework with microfinance-specific operational overlays. NBFC-MFI KYC follows the NBFC KYC Master Direction, 2025 with the same overlays. Both apply the 2022 RBI Microfinance Master Direction's household income assessment and β‚Ή3,00,000 threshold. The substantive rules are similar; the governance framework above the KYC function (prudential regulation, reporting to RBI) differs between banks and NBFCs.

Preeti Kulkarni

Preeti Kulkarni

Content Marketer

LinedIn
Preeti is a tech enthusiast who enjoys demystifying complex tech concepts majorly in fintech solutions. Infusing her enthusiasm into marketing, she crafts compelling product narratives for HyperVerge's diverse audience.

Related Blogs

What Is eNACH and How Does KYC Apply to Mandate Registration?

eNACH Mandate KYC sits at an odd intersection of two compliance systems....

KYC Outsourcing: When to Outsource KYC and How to Choose a Provider

KYC outsourcing is now a board-level question rather than an operations decision....

KYC in Telecom: Why Telecom Companies Need KYC and How It Works

KYC for Telecom exists because a SIM card is one of the...